rpm package
almalinux/openssh-keysign
pkg:rpm/almalinux/openssh-keysign
Vulnerabilities (23)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-61985 | Low | 3.6 | < 9.9p1-12.el10_1.alma.1 | 9.9p1-12.el10_1.alma.1 | Oct 6, 2025 | ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. | |
| CVE-2025-61984 | Low | 3.6 | < 9.9p1-12.el10_1.alma.1 | 9.9p1-12.el10_1.alma.1 | Oct 6, 2025 | ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file | |
| CVE-2025-32728 | Med | 4.3 | < 9.9p1-11.el10.alma.1 | 9.9p1-11.el10.alma.1 | Apr 10, 2025 | In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. |
- affected < 9.9p1-12.el10_1.alma.1fixed 9.9p1-12.el10_1.alma.1
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
- affected < 9.9p1-12.el10_1.alma.1fixed 9.9p1-12.el10_1.alma.1
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file
- affected < 9.9p1-11.el10.alma.1fixed 9.9p1-11.el10.alma.1
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
Page 2 of 2